Skip to content
AvailabilitySign inBook a DemoJoin Waitlist
All CCNA topics

4.0 Network Services and Security

Storm Control & RA Guard Practice Questions

New in CCNA v2.0

Layer 2 and first-hop protections: storm control thresholds and IPv6 RA guard.

CCNA v2.0 objectives 4.7.c, 4.7.d · objective map

Author-reviewed by LabFabric · 25 September 2026 · Report a content issue

One solved question, so you can see how these are marked

What does storm control on a switch port do?

It limits broadcast, multicast or unicast traffic that exceeds a configured threshold on the port

Storm control measures traffic of a selected type over an interval, and when it exceeds the threshold it suppresses it or takes another configured action. This protects the switch and hosts from a broadcast storm.

Every question in the set below is marked like this. The answers stay hidden until you pick one.

Find related practice in the CCNA path
All 9 Storm Control & RA Guard questions in this set

Answers and explanations appear when you work through the set above.

  1. Which command limits broadcast traffic on an interface to 20 percent of the port bandwidth?

    • storm-control broadcast level 20
    • storm-control broadcast rate 20 percent
    • broadcast-limit 20
    • storm-control level broadcast 20 shutdown

  2. Which command makes a port go into the error-disabled state when a storm is detected, instead of just dropping the excess traffic?

    • storm-control action shutdown
    • storm-control action trap
    • storm-control level shutdown
    • spanning-tree bpduguard enable

  3. Which show command displays storm control settings and current status for interfaces?

    • show storm-control
    • show interfaces storm
    • show port-security storm
    • show spanning-tree storm

  4. A Layer 2 loop is causing a broadcast storm on an access switch. Which feature limits how much broadcast traffic each host port can forward?

    • Storm control
    • DHCP snooping
    • Dynamic ARP inspection
    • Port security with sticky MAC

  5. Which threat does IPv6 RA guard mitigate?

    • Rogue Router Advertisement messages that can make hosts use an attacker as their default gateway
    • MAC flooding of the CAM table
    • DHCPv4 starvation
    • ARP spoofing in IPv4 networks

  6. On which ports should RA guard normally drop incoming Router Advertisements?

    • Host-facing ports
    • The port connected to the legitimate router
    • The console port
    • Only the native VLAN trunk between two hubs

  7. Which configuration sequence defines an RA guard policy for host ports on a Cisco IOS XE switch?

    • ipv6 nd raguard policy HOSTS, then device-role host, then ipv6 nd raguard attach-policy HOSTS on the interface
    • ip ra-guard enable on the VLAN
    • ipv6 raguard trust on every port
    • switchport ra-guard block

  8. Which ICMPv6 message type is the Router Advertisement that RA guard inspects?

    • Type 134
    • Type 133
    • Type 135
    • Type 128

  9. Which feature is the IPv6 counterpart in purpose to using DHCP snooping to stop a rogue DHCPv4 server from becoming a client's gateway source?

    • RA guard
    • Storm control
    • Port security
    • BPDU guard